Visitor Information Notice

Information Notice on the Processing of Personal Data for Visitors

Dear Visitor,

Our Company collects data within the framework of the personal data processing conditions set out in Articles 5 and 6 of the Personal Data Protection Law for the purposes of ensuring security at its factory, administrative building, and physical premises and ensuring legal, technical, and commercial occupational safety through video recording by a closed-circuit television system (CCTV) at the Company’s premises, monitoring through an internet firewall and digital recording systems, records maintained to monitor guest entries and exits, and guest internet services.

In processing and retaining your personal data, our Company acts in accordance with the Constitution and Personal Data Protection Law No. 6698 and takes the highest level of security measures, exercising the utmost diligence to ensure the security of your personal data. Through this notice, we aim to fulfil our obligation under Article 10 of Personal Data Protection Law No. 6698 to inform you about the purposes and legal grounds for processing your personal data and your rights.

Definitions

Identity Information: The visitor’s first name and surname provided by the visitor.

Visual Data: Image data automatically processed by cameras.

Licence Plate Data: Data provided by the visitor at vehicle entrances or obtained through cameras.

1. Data Controller

Pursuant to Personal Data Protection Law No. 6698 (the “Law”), your personal data shall be processed by (COMPANY EMAIL ADDRESS) (the “Company”), acting as the data controller, as explained below and within the limits prescribed by the applicable legislation.

2. Purpose of Processing Personal Data

For the purpose of ensuring security, (COMPANY TITLE), acting as the data controller pursuant to the Personal Data Protection Law, processes personal data through security camera monitoring activities conducted at our company building and physical premises and by monitoring the identity information of guests and subcontractors (first name and surname, including the monitoring of vehicles belonging to guests and subcontractors), information concerning the institutions/companies from which they arrive, and their entries and exits (the date and time of their entry into and exit from our Company).

Your personal data shall be processed by our Company within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law and for the purposes of ensuring the security of all technical facilities and premises of our Company, ensuring physical security, managing your personal data and access records transmitted by you while using the internet access facilities provided to visitors by our Company, and fulfilling our obligations arising from the applicable legislation.

3. Parties to Whom Personal Data May Be Transferred and the Purpose of Transfer

Your processed personal data may be transferred to our solution partners, affiliates and group companies, legally authorised public institutions, and private persons for the purposes of managing access records, fulfilling our obligations arising from the applicable legislation, and ensuring the security of our Company’s premises, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law.

4. Personal Data Retention Period

Your personal data shall be retained for 6 (six) months (except for Visual Data and Licence Plate Data) for the purposes specified above. Upon expiry of this period, your personal data shall be deleted, destroyed, and/or anonymised by (COMPANY TITLE) or upon your request, using the methods specified under the Personal Data Protection Law and the relevant regulations.

5. Method and Legal Grounds for Collecting Personal Data

For the purposes of ensuring security at the building and physical premises of (COMPANY TITLE) and ensuring legal, technical, and commercial occupational safety, data are collected within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Personal Data Protection Law through monitoring and recording by means of a closed-circuit television system (CTTV) at the Company’s premises, the issuance of entry cards, identity registration activities, and the monitoring of guest entries and exits.

In addition, if the Visitor wishes to receive internet services by using the internet network of (COMPANY TITLE), data are collected for the purposes of monitoring and ensuring the traceability and security of this service.

Pursuant to the KVKK, such data are collected lawfully by automatic or non-automatic means through information you have verbally provided to (COMPANY TITLE), camera footage, and electronic, digital, and technical channels. Such data are processed within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK, based on the legal grounds specified in Articles 2 and 3 of this notice.

The camera monitoring and recording activities conducted by (COMPANY TITLE) are carried out in accordance with Private Security Services Law No. 5188 and the regulation implementing this law and based on the legal ground of our Company’s legitimate interests.

(COMPANY TITLE) conducts security camera monitoring activities for the purposes stipulated under the applicable legislation in force and in accordance with the personal data processing conditions specified in the Personal Data Protection Law.

6. Rights of the Personal Data Subject Specified in Article 11 of the Law

Pursuant to Article 11 of the Law, you have the following rights regarding the processing of your personal data by our Company:

• To learn whether your personal data are being processed
• To request information if your personal data have been processed
• To learn the purpose for which your personal data are processed and whether they are used in accordance with that purpose
• To know the third parties to whom your personal data have been transferred domestically and abroad
• To request the correction of your personal data if they have been processed incorrectly
• To request the deletion or destruction of your personal data if the reasons requiring their processing cease to exist
• To request that correction or deletion procedures be communicated to the third parties to whom your personal data have been transferred
• To object to the occurrence of a result against you arising from the analysis of the processed data exclusively through automated systems
• To request compensation in writing if you suffer damage due to the unlawful processing of your personal data

We would like to state that we reserve the right to reject requests that are unreasonably repetitive, require disproportionate technical effort, jeopardise the privacy of others, or are otherwise excessively difficult.

Method for Exercising Your Rights

To exercise your rights specified above, after completing the form available at (COMPANY EMAIL ADDRESS), you may submit a wet-signed copy of the form to (COMPANY ADDRESS) through a notary public, in person by hand, or in writing by registered mail with return receipt requested. Alternatively, after signing the form personally or using a “secure electronic signature” within the scope of Electronic Signature Law No. 5070, you may send the securely electronically signed form by registered electronic mail to (COMPANY EMAIL ADDRESS), or submit it to (COMPANY EMAIL ADDRESS) using a secure electronic signature, mobile signature, an email address previously notified by the data subject to (COMPANY TITLE) and registered in the system of (COMPANY TITLE), or software or an application developed for application purposes.

Applications must be submitted in Turkish.

For detailed information regarding our Personal Data Protection and Processing Policy and to learn about your rights under the Law, please visit our website at (COMPANY EMAIL ADDRESS).